[ 52.631421][ T3605] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.648044][ T3605] veth1_macvtap: left promiscuous mode [ 52.654760][ T3605] veth0_macvtap: left promiscuous mode [ 52.660451][ T3605] veth1_vlan: left promiscuous mode [ 52.666547][ T3605] veth0_vlan: left promiscuous mode [ 52.829907][ T3605] team0 (unregistering): Port device team_slave_1 removed [ 52.848140][ T3605] team0 (unregistering): Port device team_slave_0 removed [ 52.861359][ T3605] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 52.878501][ T3605] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 52.924419][ T3605] bond0 (unregistering): Released all slaves Warning: Permanently added '10.128.10.14' (ECDSA) to the list of known hosts. 2023/03/29 13:40:37 ignoring optional flag "sandboxArg"="0" 2023/03/29 13:40:37 parsed 1 programs [ 66.597346][ T26] kauditd_printk_skb: 1 callbacks suppressed [ 66.597354][ T26] audit: type=1400 audit(1680097237.926:188): avc: denied { mounton } for pid=5467 comm="syz-executor" path="/proc/sys/fs/binfmt_misc" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=dir permissive=1 2023/03/29 13:40:37 executed programs: 0 [ 66.634599][ T26] audit: type=1400 audit(1680097237.936:189): avc: denied { read } for pid=5468 comm="cmp" name="ntp.conf.lapb8.ipv4ll" dev="tmpfs" ino=1532 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.677117][ T26] audit: type=1400 audit(1680097237.936:190): avc: denied { open } for pid=5468 comm="cmp" path="/run/dhcpcd/hook-state/ntp.conf.lapb8.ipv4ll" dev="tmpfs" ino=1532 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.703278][ T26] audit: type=1400 audit(1680097237.936:191): avc: denied { getattr } for pid=5468 comm="cmp" path="/run/dhcpcd/hook-state/ntp.conf.lapb8.ipv4ll" dev="tmpfs" ino=1532 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.729281][ T26] audit: type=1400 audit(1680097237.966:192): avc: denied { unlink } for pid=5469 comm="rm" name="ntp.conf.lapb8.ipv4ll" dev="tmpfs" ino=1532 scontext=system_u:system_r:dhcpc_t tcontext=system_u:object_r:tmpfs_t tclass=file permissive=1 [ 66.753574][ T26] audit: type=1400 audit(1680097237.966:193): avc: denied { mount } for pid=5467 comm="syz-executor" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 66.777575][ T26] audit: type=1400 audit(1680097237.966:194): avc: denied { create } for pid=5467 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.799121][ T26] audit: type=1400 audit(1680097237.966:195): avc: denied { write } for pid=5467 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.820205][ T26] audit: type=1400 audit(1680097237.966:196): avc: denied { read } for pid=5467 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 66.841222][ T26] audit: type=1400 audit(1680097238.026:197): avc: denied { create } for pid=5475 comm="syz-executor.0" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 69.791172][ T5041] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 73.951161][ T5041] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 76.753260][ T6] cfg80211: failed to load regulatory.db [ 78.111136][ T5041] Bluetooth: hci0: Opcode 0x c03 failed: -110 [ 80.197512][ T26] kauditd_printk_skb: 3 callbacks suppressed [ 80.197521][ T26] audit: type=1400 audit(1680097251.526:201): avc: denied { ioctl } for pid=5506 comm="syz-executor.0" path="socket:[30413]" dev="sockfs" ino=30413 ioctlcmd=0x48c9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 80.198086][ T4354] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.237547][ T4354] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.245428][ T4354] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.253675][ T4354] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.262603][ T4354] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.269936][ T4354] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.287514][ T26] audit: type=1400 audit(1680097251.606:202): avc: denied { read } for pid=5506 comm="syz-executor.0" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 80.310999][ T26] audit: type=1400 audit(1680097251.606:203): avc: denied { open } for pid=5506 comm="syz-executor.0" path="net:[4026531840]" dev="nsfs" ino=4026531840 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 80.335423][ T26] audit: type=1400 audit(1680097251.616:204): avc: denied { mounton } for pid=5506 comm="syz-executor.0" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 80.400562][ T5506] chnl_net:caif_netlink_parms(): no params data found [ 80.435138][ T5506] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.442989][ T5506] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.450228][ T5506] bridge_slave_0: entered allmulticast mode [ 80.458672][ T5506] bridge_slave_0: entered promiscuous mode [ 80.466590][ T5506] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.475135][ T5506] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.482639][ T5506] bridge_slave_1: entered allmulticast mode [ 80.489023][ T5506] bridge_slave_1: entered promiscuous mode [ 80.507332][ T5506] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.517950][ T5506] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.539620][ T5506] team0: Port device team_slave_0 added [ 80.547326][ T5506] team0: Port device team_slave_1 added [ 80.563258][ T5506] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 80.570251][ T5506] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.596710][ T5506] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 80.609183][ T5506] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 80.616326][ T5506] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.643508][ T5506] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 80.671406][ T5506] hsr_slave_0: entered promiscuous mode [ 80.677798][ T5506] hsr_slave_1: entered promiscuous mode [ 81.178256][ T5506] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 81.188910][ T5506] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 81.200286][ T5506] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 81.209256][ T5506] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 81.233148][ T5506] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.240359][ T5506] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.247804][ T5506] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.254967][ T5506] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.309363][ T5506] 8021q: adding VLAN 0 to HW filter on device bond0 [ 81.323043][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 81.334199][ T4383] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.343127][ T4383] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.352179][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bond0: link becomes ready [ 81.367687][ T5506] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.382762][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 81.393134][ T4383] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.400238][ T4383] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.422785][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 81.432493][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 81.441432][ T4383] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.448614][ T4383] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.457778][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 81.467110][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 81.478531][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 81.488598][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 81.498993][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 81.508490][ T4383] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 81.525128][ T5506] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 81.539874][ T5506] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 81.553004][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 81.564400][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 81.573815][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 81.583734][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 81.593131][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 81.604960][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 81.707030][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 81.716418][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 81.730242][ T5506] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.753800][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 81.763763][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 81.786790][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 81.797912][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 81.808998][ T5506] veth0_vlan: entered promiscuous mode [ 81.820494][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 81.829364][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 81.843637][ T5506] veth1_vlan: entered promiscuous mode [ 81.868758][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 81.877802][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 81.887713][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 81.897607][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 81.909573][ T5506] veth0_macvtap: entered promiscuous mode [ 81.923954][ T5506] veth1_macvtap: entered promiscuous mode [ 81.941739][ T5506] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.949203][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 81.959697][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 81.968973][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 81.979433][ T5049] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 81.991475][ T5506] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.005242][ T5506] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.014838][ T5506] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.025007][ T5506] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.034398][ T5506] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.048393][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 82.058428][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 82.118509][ T3605] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.143196][ T3605] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.164058][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 82.181367][ T10] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.189614][ T10] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.202385][ T13] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 82.217627][ T26] audit: type=1400 audit(1680097253.546:205): avc: denied { mounton } for pid=5506 comm="syz-executor.0" path="/dev/binderfs" dev="devtmpfs" ino=2319 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=dir permissive=1 [ 82.290646][ T26] audit: type=1400 audit(1680097253.616:206): avc: denied { ioctl } for pid=5599 comm="syz-executor.0" path="/dev/raw-gadget" dev="devtmpfs" ino=731 ioctlcmd=0x5500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 82.352067][ T4354] Bluetooth: hci0: command 0x0409 tx timeout [ 82.561051][ T21] usb 1-1: new high-speed USB device number 2 using dummy_hcd [ 82.801126][ T21] usb 1-1: Using ep0 maxpacket: 16 [ 82.961283][ T21] usb 1-1: unable to get BOS descriptor or descriptor too short [ 83.041112][ T21] usb 1-1: config 7 has an invalid interface number: 112 but max is 2 [ 83.050285][ T21] usb 1-1: config 7 has an invalid interface number: 208 but max is 2 [ 83.061773][ T21] usb 1-1: config 7 has an invalid interface number: 86 but max is 2 [ 83.070082][ T21] usb 1-1: config 7 has no interface number 0 [ 83.076825][ T21] usb 1-1: config 7 has no interface number 1 [ 83.085256][ T21] usb 1-1: config 7 has no interface number 2 [ 83.091920][ T21] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0x7 has invalid maxpacket 1023, setting to 64 [ 83.105116][ T21] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0xA has an invalid bInterval 63, changing to 9 [ 83.116784][ T21] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0x7, skipping [ 83.129287][ T21] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0x1 has invalid maxpacket 1023, setting to 64 [ 83.140847][ T21] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0x9 has invalid maxpacket 1024, setting to 64 [ 83.154356][ T21] usb 1-1: config 7 interface 208 altsetting 163 bulk endpoint 0x5 has invalid maxpacket 64 [ 83.166048][ T21] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0x2, skipping [ 83.177695][ T21] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0xF has invalid maxpacket 1024, setting to 64 [ 83.191280][ T21] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0x9, skipping [ 83.202687][ T21] usb 1-1: config 7 interface 208 altsetting 163 has a duplicate endpoint with address 0xA, skipping [ 83.214977][ T21] usb 1-1: config 7 interface 208 altsetting 163 endpoint 0xD has invalid maxpacket 1024, setting to 64 [ 83.226551][ T21] usb 1-1: config 7 interface 86 altsetting 169 has an invalid endpoint with address 0x80, skipping [ 83.238984][ T21] usb 1-1: config 7 interface 112 has no altsetting 0 [ 83.246225][ T21] usb 1-1: config 7 interface 208 has no altsetting 0 [ 83.254570][ T21] usb 1-1: config 7 interface 86 has no altsetting 0 [ 83.502183][ T21] usb 1-1: string descriptor 0 read error: -22 [ 83.508543][ T21] usb 1-1: New USB device found, idVendor=077d, idProduct=627a, bcdDevice= 0.10 [ 83.518211][ T21] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 83.577351][ T21] ------------[ cut here ]------------ [ 83.583086][ T21] usb 1-1: BOGUS urb xfer, pipe 1 != type 3 [ 83.597397][ T21] WARNING: CPU: 1 PID: 21 at drivers/usb/core/urb.c:504 usb_submit_urb+0xb07/0x1690 [ 83.607150][ T21] Modules linked in: [ 83.611120][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted 6.3.0-rc4-syzkaller #0 [ 83.619278][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/17/2023 [ 83.629423][ T21] Workqueue: usb_hub_wq hub_event [ 83.634695][ T21] RIP: 0010:usb_submit_urb+0xb07/0x1690 [ 83.640259][ T21] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 03 14 0a ff 44 8b 04 24 4c 89 e2 48 c7 c7 40 6c a9 89 8b 4c 24 08 48 89 c6 e8 d9 54 fc fb <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00 [ 83.660472][ T21] RSP: 0018:ffffc900003ceeb0 EFLAGS: 00010286 [ 83.666619][ T21] RAX: 0000000000000000 RBX: ffff88802a4c6000 RCX: 0000000000000000 [ 83.675052][ T21] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000001 [ 83.684245][ T21] RBP: ffff8880297ece00 R08: 0000000000000001 R09: ffff8880b9d2798b [ 83.692543][ T21] R10: ffffed10173a4f31 R11: 0000000000000000 R12: ffff888024dbb5c0 [ 83.700716][ T21] R13: 00000000000000ae R14: 0000000000000002 R15: 0000000000000001 [ 83.708928][ T21] FS: 0000000000000000(0000) GS:ffff8880b9d00000(0000) knlGS:0000000000000000 [ 83.718048][ T21] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 83.724708][ T21] CR2: 00007fab208be111 CR3: 000000007c0a7000 CR4: 00000000003506e0 [ 83.732841][ T21] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 83.741066][ T21] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 83.749150][ T21] Call Trace: [ 83.752491][ T21] [ 83.755522][ T21] ? __init_swait_queue_head+0xc6/0x150 [ 83.761301][ T21] usb_start_wait_urb+0xf9/0x450 [ 83.766341][ T21] ? usb_api_blocking_completion+0xa0/0xa0 [ 83.772731][ T21] ? verify_cpu+0xc0/0x100 [ 83.777534][ T21] ? usb_init_urb+0x27/0x110 [ 83.782550][ T21] ? usb_alloc_urb+0x35/0x50 [ 83.787263][ T21] ? usb_bulk_msg+0x84/0x5f0 [ 83.792000][ T21] shark_write_reg+0x1d5/0x3a0 [ 83.797345][ T21] ? led_classdev_unregister+0x50/0x50 [ 83.802996][ T21] ? shark_read_reg+0x530/0x530 [ 83.807946][ T21] ? snprintf+0x9e/0xd0 [ 83.812434][ T21] radio_tea5777_set_freq+0x1df/0x480 [ 83.818021][ T21] radio_tea5777_init+0xb2/0x740 [ 83.824601][ T21] usb_shark_probe+0x6b5/0x910 [ 83.829489][ T21] usb_probe_interface+0x268/0x810 [ 83.834996][ T21] really_probe+0x1c7/0xb20 [ 83.840234][ T21] __driver_probe_device+0x186/0x460 [ 83.845585][ T21] ? usb_match_id.part.0+0xdd/0x140 [ 83.850842][ T21] ? driver_probe_device+0x110/0x110 [ 83.856588][ T21] driver_probe_device+0x44/0x110 [ 83.862546][ T21] __device_attach_driver+0x14a/0x270 [ 83.867950][ T21] bus_for_each_drv+0xfe/0x190 [ 83.872868][ T21] ? mark_held_locks+0x9f/0xe0 [ 83.877834][ T21] ? bus_for_each_dev+0x160/0x160 [ 83.883024][ T21] ? lockdep_hardirqs_on+0x79/0x100 [ 83.888412][ T21] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 83.894455][ T21] __device_attach+0x19e/0x3d0 [ 83.899411][ T21] ? device_driver_attach+0x1b0/0x1b0 [ 83.904839][ T21] ? do_raw_spin_unlock+0x171/0x230 [ 83.910092][ T21] bus_probe_device+0x127/0x170 [ 83.915091][ T21] device_add+0xee0/0x1930 [ 83.919530][ T21] ? __fw_devlink_link_to_consumers.isra.0+0x1f0/0x1f0 [ 83.926440][ T21] ? lockdep_hardirqs_on+0x79/0x100 [ 83.931691][ T21] usb_set_configuration+0xab8/0x1a20 [ 83.937072][ T21] ? kernfs_add_one+0x11e/0x450 [ 83.941981][ T21] usb_generic_driver_probe+0x84/0xd0 [ 83.947395][ T21] usb_probe_device+0x94/0x230 [ 83.952487][ T21] really_probe+0x1c7/0xb20 [ 83.957055][ T21] __driver_probe_device+0x186/0x460 [ 83.962666][ T21] ? driver_probe_device+0x110/0x110 [ 83.968295][ T21] driver_probe_device+0x44/0x110 [ 83.973396][ T21] __device_attach_driver+0x14a/0x270 [ 83.979236][ T21] bus_for_each_drv+0xfe/0x190 [ 83.984246][ T21] ? mark_held_locks+0x9f/0xe0 [ 83.989550][ T21] ? bus_for_each_dev+0x160/0x160 [ 83.994723][ T21] ? lockdep_hardirqs_on+0x79/0x100 [ 84.001110][ T21] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 84.007056][ T21] __device_attach+0x19e/0x3d0 [ 84.011880][ T21] ? device_driver_attach+0x1b0/0x1b0 [ 84.017560][ T21] ? do_raw_spin_unlock+0x171/0x230 [ 84.022824][ T21] bus_probe_device+0x127/0x170 [ 84.027775][ T21] device_add+0xee0/0x1930 [ 84.032257][ T21] ? __fw_devlink_link_to_consumers.isra.0+0x1f0/0x1f0 [ 84.039133][ T21] ? usb_detect_static_quirks+0xbc/0x2d0 [ 84.044926][ T21] usb_new_device+0xc6a/0x1920 [ 84.049747][ T21] ? hub_disconnect+0x470/0x470 [ 84.054659][ T21] hub_event+0x24c8/0x4240 [ 84.059187][ T21] ? hub_port_debounce+0x2e0/0x2e0 [ 84.064370][ T21] ? __lock_acquire+0xbe1/0x5d40 [ 84.069329][ T21] ? lock_release+0x670/0x670 [ 84.074067][ T21] ? lock_downgrade+0x690/0x690 [ 84.079146][ T21] ? do_raw_spin_lock+0x120/0x2a0 [ 84.084283][ T21] process_one_work+0x865/0x13f0 [ 84.089507][ T21] ? lock_release+0x670/0x670 [ 84.094249][ T21] ? pwq_dec_nr_in_flight+0x230/0x230 [ 84.099649][ T21] ? spin_bug+0x1c0/0x1c0 [ 84.104054][ T21] worker_thread+0x598/0xec0 [ 84.108661][ T21] ? process_one_work+0x13f0/0x13f0 [ 84.113923][ T21] kthread+0x294/0x330 [ 84.118012][ T21] ? kthread_complete_and_exit+0x20/0x20 [ 84.123729][ T21] ret_from_fork+0x1f/0x30 [ 84.128160][ T21] [ 84.131344][ T21] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 84.138625][ T21] CPU: 1 PID: 21 Comm: kworker/1:0 Not tainted 6.3.0-rc4-syzkaller #0 [ 84.146866][ T21] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/17/2023 [ 84.157188][ T21] Workqueue: usb_hub_wq hub_event [ 84.162202][ T21] Call Trace: [ 84.165470][ T21] [ 84.168386][ T21] dump_stack_lvl+0x60/0xa0 [ 84.172921][ T21] panic+0x4ab/0x550 [ 84.176819][ T21] ? panic_smp_self_stop+0x70/0x70 [ 84.181906][ T21] ? usb_submit_urb+0xb07/0x1690 [ 84.186998][ T21] check_panic_on_warn+0x71/0x80 [ 84.192009][ T21] __warn+0xd0/0x2c0 [ 84.196119][ T21] ? usb_submit_urb+0xb07/0x1690 [ 84.201051][ T21] report_bug+0x33f/0x400 [ 84.205460][ T21] handle_bug+0x3c/0x70 [ 84.209773][ T21] exc_invalid_op+0x14/0x40 [ 84.214255][ T21] asm_exc_invalid_op+0x16/0x20 [ 84.219086][ T21] RIP: 0010:usb_submit_urb+0xb07/0x1690 [ 84.224877][ T21] Code: 4c 24 18 89 4c 24 08 44 89 04 24 e8 03 14 0a ff 44 8b 04 24 4c 89 e2 48 c7 c7 40 6c a9 89 8b 4c 24 08 48 89 c6 e8 d9 54 fc fb <0f> 0b 4c 8b 4c 24 18 e9 c0 fa ff ff 48 8d 7b 1c 48 ba 00 00 00 00 [ 84.244897][ T21] RSP: 0018:ffffc900003ceeb0 EFLAGS: 00010286 [ 84.250942][ T21] RAX: 0000000000000000 RBX: ffff88802a4c6000 RCX: 0000000000000000 [ 84.258893][ T21] RDX: 0000000000000002 RSI: 0000000000000004 RDI: 0000000000000001 [ 84.267026][ T21] RBP: ffff8880297ece00 R08: 0000000000000001 R09: ffff8880b9d2798b [ 84.274991][ T21] R10: ffffed10173a4f31 R11: 0000000000000000 R12: ffff888024dbb5c0 [ 84.283022][ T21] R13: 00000000000000ae R14: 0000000000000002 R15: 0000000000000001 [ 84.290975][ T21] ? __init_swait_queue_head+0xc6/0x150 [ 84.296526][ T21] usb_start_wait_urb+0xf9/0x450 [ 84.301552][ T21] ? usb_api_blocking_completion+0xa0/0xa0 [ 84.307426][ T21] ? verify_cpu+0xc0/0x100 [ 84.311816][ T21] ? usb_init_urb+0x27/0x110 [ 84.316491][ T21] ? usb_alloc_urb+0x35/0x50 [ 84.321056][ T21] ? usb_bulk_msg+0x84/0x5f0 [ 84.325621][ T21] shark_write_reg+0x1d5/0x3a0 [ 84.330364][ T21] ? led_classdev_unregister+0x50/0x50 [ 84.335808][ T21] ? shark_read_reg+0x530/0x530 [ 84.340722][ T21] ? snprintf+0x9e/0xd0 [ 84.344943][ T21] radio_tea5777_set_freq+0x1df/0x480 [ 84.350306][ T21] radio_tea5777_init+0xb2/0x740 [ 84.355586][ T21] usb_shark_probe+0x6b5/0x910 [ 84.360330][ T21] usb_probe_interface+0x268/0x810 [ 84.365432][ T21] really_probe+0x1c7/0xb20 [ 84.369914][ T21] __driver_probe_device+0x186/0x460 [ 84.375178][ T21] ? usb_match_id.part.0+0xdd/0x140 [ 84.380447][ T21] ? driver_probe_device+0x110/0x110 [ 84.385793][ T21] driver_probe_device+0x44/0x110 [ 84.390793][ T21] __device_attach_driver+0x14a/0x270 [ 84.396153][ T21] bus_for_each_drv+0xfe/0x190 [ 84.400892][ T21] ? mark_held_locks+0x9f/0xe0 [ 84.405657][ T21] ? bus_for_each_dev+0x160/0x160 [ 84.410669][ T21] ? lockdep_hardirqs_on+0x79/0x100 [ 84.415852][ T21] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 84.421724][ T21] __device_attach+0x19e/0x3d0 [ 84.426476][ T21] ? device_driver_attach+0x1b0/0x1b0 [ 84.431906][ T21] ? do_raw_spin_unlock+0x171/0x230 [ 84.437098][ T21] bus_probe_device+0x127/0x170 [ 84.441950][ T21] device_add+0xee0/0x1930 [ 84.446431][ T21] ? __fw_devlink_link_to_consumers.isra.0+0x1f0/0x1f0 [ 84.453268][ T21] ? lockdep_hardirqs_on+0x79/0x100 [ 84.458444][ T21] usb_set_configuration+0xab8/0x1a20 [ 84.463884][ T21] ? kernfs_add_one+0x11e/0x450 [ 84.468709][ T21] usb_generic_driver_probe+0x84/0xd0 [ 84.480594][ T21] usb_probe_device+0x94/0x230 [ 84.485443][ T21] really_probe+0x1c7/0xb20 [ 84.490127][ T21] __driver_probe_device+0x186/0x460 [ 84.495397][ T21] ? driver_probe_device+0x110/0x110 [ 84.500670][ T21] driver_probe_device+0x44/0x110 [ 84.506053][ T21] __device_attach_driver+0x14a/0x270 [ 84.511772][ T21] bus_for_each_drv+0xfe/0x190 [ 84.516512][ T21] ? mark_held_locks+0x9f/0xe0 [ 84.521254][ T21] ? bus_for_each_dev+0x160/0x160 [ 84.526262][ T21] ? lockdep_hardirqs_on+0x79/0x100 [ 84.531526][ T21] ? _raw_spin_unlock_irqrestore+0x3d/0x70 [ 84.537417][ T21] __device_attach+0x19e/0x3d0 [ 84.542315][ T21] ? device_driver_attach+0x1b0/0x1b0 [ 84.547680][ T21] ? do_raw_spin_unlock+0x171/0x230 [ 84.552949][ T21] bus_probe_device+0x127/0x170 [ 84.557949][ T21] device_add+0xee0/0x1930 [ 84.562341][ T21] ? __fw_devlink_link_to_consumers.isra.0+0x1f0/0x1f0 [ 84.569335][ T21] ? usb_detect_static_quirks+0xbc/0x2d0 [ 84.575035][ T21] usb_new_device+0xc6a/0x1920 [ 84.579774][ T21] ? hub_disconnect+0x470/0x470 [ 84.584681][ T21] hub_event+0x24c8/0x4240 [ 84.589083][ T21] ? hub_port_debounce+0x2e0/0x2e0 [ 84.594200][ T21] ? __lock_acquire+0xbe1/0x5d40 [ 84.599116][ T21] ? lock_release+0x670/0x670 [ 84.603855][ T21] ? lock_downgrade+0x690/0x690 [ 84.608681][ T21] ? do_raw_spin_lock+0x120/0x2a0 [ 84.613768][ T21] process_one_work+0x865/0x13f0 [ 84.618711][ T21] ? lock_release+0x670/0x670 [ 84.623384][ T21] ? pwq_dec_nr_in_flight+0x230/0x230 [ 84.628843][ T21] ? spin_bug+0x1c0/0x1c0 [ 84.633165][ T21] worker_thread+0x598/0xec0 [ 84.637742][ T21] ? process_one_work+0x13f0/0x13f0 [ 84.642937][ T21] kthread+0x294/0x330 [ 84.647010][ T21] ? kthread_complete_and_exit+0x20/0x20 [ 84.652677][ T21] ret_from_fork+0x1f/0x30 [ 84.657091][ T21] [ 84.660502][ T21] Kernel Offset: disabled [ 84.664910][ T21] Rebooting in 86400 seconds..